Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3136382e3232382e39322e302f32322d3234203d3e203532373731.roa
File:                     3136382e3232382e39322e302f32322d3234203d3e203532373731.roa (raw, json)
Hash identifier:          n06A7aMK9KWyvaj6TunFFzOW1nkzjRc2YjajEjkLNUQ=
Subject key identifier:   1C:9C:2A:94:BE:7B:E9:E4:F6:BA:DF:51:45:B0:D7:E4:66:6D:21:78
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       278B4FAAD57AF4701262FC05C0EABCEB09FDA75A
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3136382e3232382e39322e302f32322d3234203d3e203532373731.roa
Signing time:             Thu 05 Feb 2026 11:50:08 +0000
ROA not before:           Thu 05 Feb 2026 11:45:08 +0000
ROA not after:            Thu 04 Feb 2027 11:50:08 +0000
asID:                     52771
IP address blocks:        168.228.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8b:4f:aa:d5:7a:f4:70:12:62:fc:05:c0:ea:bc:eb:09:fd:a7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Feb  5 11:45:08 2026 GMT
            Not After : Feb  4 11:50:08 2027 GMT
        Subject: CN=1C9C2A94BE7BE9E4F6BADF5145B0D7E4666D2178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:46:26:97:31:e9:80:6d:58:99:8f:f4:a0:
                    5b:0f:aa:a2:c3:03:cb:8f:e9:cc:c2:31:58:b4:79:
                    fd:58:07:06:d6:ba:e9:75:8a:73:29:29:21:45:57:
                    c2:e3:d9:fc:0d:46:de:ba:21:a5:a1:46:50:9f:f4:
                    e0:73:57:3d:13:a8:57:9f:8d:23:be:7d:9b:7e:f8:
                    c2:9d:d9:63:36:2f:a3:fc:66:c5:17:36:57:59:07:
                    e1:ba:9e:9f:fe:9d:0d:7e:f0:e5:8e:0a:0d:d1:16:
                    85:31:1c:46:17:39:ab:f8:ea:b3:b0:76:33:e7:9d:
                    11:dd:85:81:02:14:a7:26:cf:0c:42:bb:02:7a:5f:
                    e8:0f:87:c9:18:7a:2c:f0:c0:5b:19:b4:57:50:20:
                    75:aa:b2:ed:2c:b6:fc:7e:90:71:1e:1c:32:10:b7:
                    73:56:3e:30:29:7a:91:db:b2:74:6f:ce:d4:7c:9b:
                    c2:76:b3:ca:28:69:28:1f:38:3e:bf:6e:b7:7e:02:
                    8b:71:05:6e:ce:d1:e8:22:52:9d:61:1a:2e:0f:e2:
                    5b:8a:c8:de:e4:fa:fe:f8:f0:cb:f7:d4:5e:50:e6:
                    e2:25:83:fc:16:26:6d:94:2a:29:e3:33:61:2a:d5:
                    14:66:60:20:bb:94:11:0f:79:c3:8a:44:cc:b6:72:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9C:2A:94:BE:7B:E9:E4:F6:BA:DF:51:45:B0:D7:E4:66:6D:21:78
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3136382e3232382e39322e302f32322d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:ed:f2:2d:68:ad:a2:db:ef:49:67:cf:aa:e4:99:4e:05:
         8a:88:54:69:45:d6:5b:17:25:28:6b:1e:ba:c5:98:63:bb:f8:
         be:3d:7f:25:6c:23:4c:7b:d0:d4:87:40:bb:19:c2:cd:bb:2f:
         34:aa:81:a0:11:c4:86:6c:b4:3c:bc:70:c9:fe:36:66:d2:69:
         0d:0d:02:f1:4a:5c:88:0d:67:6a:b0:22:65:45:01:04:85:c6:
         ce:b5:07:6d:24:79:20:e3:ae:f1:83:b5:e0:f8:08:89:f8:04:
         b1:a9:5d:27:52:ce:31:25:ad:3e:18:ac:5e:47:a0:1a:67:8d:
         36:eb:8f:d0:a9:11:9e:28:25:bd:f6:55:3c:fe:ac:86:75:22:
         56:d9:98:ea:22:c0:27:7b:c4:69:e7:5f:63:f4:93:06:63:f4:
         c7:0f:ca:63:2a:19:ed:22:f1:7e:3c:22:86:c5:19:a9:b4:32:
         eb:5f:c9:c9:d2:f1:cc:b8:4c:ba:d4:31:35:9b:7d:31:f6:53:
         83:24:b5:eb:98:4b:83:fb:7d:e8:45:52:12:38:83:c0:c5:0e:
         14:69:8a:54:d0:89:ac:5e:4f:70:8b:22:3d:d4:16:08:f7:cf:
         1a:d3:86:ed:a0:77:58:4d:40:94:e1:b1:d8:63:57:7a:3e:b3:
         6c:76:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:18 2026 by rpki-client